Workflow - Revoke Entitlements Failing -Entitlement request is disabled

Identity Security Cloud (ISC) ISC Discussion and Questions
, ,
1

Hi Team ,

I am using below post to revoke entitlements for few of the sources.

Workflow - Remove entitlements from sources with a specific tag - Identity Security Cloud (ISC) / ISC Discussion and Questions - SailPoint Developer Community

I was trying to implement same logic in my tenant where I am revoking entitlements for a specific source. But I am getting error as ‘Entitlement request is disabled.’. I tried testing same API in postman and it also resulted in same error.

Loop Input:

$.hTTPRequest.body[0].access[?((@.type == “ENTITLEMENT”) && (@.source.name == “SAP Ariba” || @.source.name == “Appian” || @.source.name == “XXXXXX.local”))]

HttpRequest Input:
{“requestType”:“REVOKE_ACCESS”,“requestedFor”:[“{{$.loop.context.id}}”],“requestedItems”:[{“comment”:“Please remove”,“id”:“{{$.loop.loopInput.id}}”,“type”:“{{$.loop.loopInput.type}}”}]}

After the test case is completed, I am seeing below error.

"loopOutput": {
            "failureItems": [
              {
                "errorMessage": "task failed: activity error (type: sp:external:http:v2, scheduledEventID: 5, startedEventID: 6, identity: 1@sp-workflow-worker-stg-ap-xxxxxxx-2-9342jsjdfjsk-x@sp-workflow-engine): request failed (type: HTTP Response Returned a Client Error, retryable: false): request failed: 403 - 403 Forbidden - {\"detailCode\":\"403 Forbidden\",\"trackingId\":\"0394248934293484a969aaebf94e6dfa89c\",\"messages\":[{\"locale\":\"en-US\",\"localeOrigin\":\"DEFAULT\",\"text\":\"Entitlement request is disabled.\"},{\"locale\":\"und\",\"localeOrigin\":\"REQUEST\",\"text\":\"Entitlement request is disabled.\"}],\"causes\":[]}",
                "payload": null
              },
2

Hello @arshadsyed ,

Based on the error , I can say that “Entitlement Requests” are disabled Globally .
Check this option :

Check for Enable Entitlement Requests as well .

Thanks

2 Likes
3

Thanks @sidharth_tarlapally . After enabling Entitlement requests, we are able to revoke entitlements.

1 Like